Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

So much vulnerable dependencies while creating a react app #11742

Closed
haneenmahd opened this issue Dec 12, 2021 · 5 comments
Closed

So much vulnerable dependencies while creating a react app #11742

haneenmahd opened this issue Dec 12, 2021 · 5 comments

Comments

@haneenmahd
Copy link

Describe the bug

It appears that there are so many vulnerable dependencies in the created react app,
Screenshot 2021-12-12 at 7 40 08 PM

(Write your answer here.)

Did you try recovering your dependencies?

Yes, but It never worked
(Write your answer here.)

Which terms did you search for in User Guide?

(Write your answer here if relevant.)

Environment

Environment Info:

  current version of create-react-app: 4.0.3
  running from /home/gitpod/.npm/_npx/c67e74de0542c87c/node_modules/create-react-app

  System:
    OS: Linux 5.13 Ubuntu 20.04.2 LTS (Focal Fossa)
    CPU: (16) x64 Intel(R) Xeon(R) CPU @ 2.80GHz
  Binaries:
    Node: 16.13.0 - ~/.nvm/versions/node/v16.13.0/bin/node
    Yarn: 1.22.17 - ~/.nvm/versions/node/v16.13.0/bin/yarn
    npm: 8.3.0 - ~/.nvm/versions/node/v16.13.0/bin/npm
  Browsers:
    Chrome: Not Found
    Firefox: Not Found
  npmPackages:
    react: ^17.0.2 => 17.0.2 
    react-dom: ^17.0.2 => 17.0.2 
    react-scripts: 4.0.3 => 4.0.3 
  npmGlobalPackages:
    create-react-app: Not Found

(paste the output of the command here.)

Steps to reproduce

(Write your steps here:)

  1. go to command line
  2. run `npx create-react-app my app
  3. run yarn audit
  4. see all the vulnerabilities, I got 87

Expected behavior

Have some stable versions of packages and dependencies
(Write what you thought would happen.)

Actual behavior

Screenshot 2021-12-12 at 7 44 41 PM

(Write what happened. Please add screenshots!)

Reproducible demo

Example Project
(Paste the link to an example project and exact instructions to reproduce the issue.)

@benayat
Copy link

benayat commented Dec 13, 2021

it's there for months now, it's like they gave up...

@haneenmahd
Copy link
Author

it's there for months now, it's like they gave up...

Its so annoying while building an open source project

@sg-wk
Copy link

sg-wk commented Dec 13, 2021

Will there ever be a new version that fixes all that stuff?!

@haneenmahd
Copy link
Author

Will there ever be a new version that fixes all that stuff?!

this is actually serious issue 🧐

@gaearon
Copy link
Contributor

gaearon commented Dec 13, 2021

Read this please.
#11174

@gaearon gaearon closed this as completed Dec 13, 2021
@facebook facebook locked as resolved and limited conversation to collaborators Dec 13, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

4 participants